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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for repty is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to communication(s) filed on 28 December 2001 . 
2a)D This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ED Claim(s) 1-19 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E3 Claim(s) 1-19 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) Q Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1 .121(d). 
1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
aM All b)D Some * c)D None of: 

1 .(3 Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attach ment(s) 

1 ) ^ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5 ) 0 Notice of Informal Patent Application (PTO-152) 

Paper No(s)/Mail Date . 6) □ Other: . 
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DETAILED ACTION 

Claims 1-19 are presented for examination on the merits. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

Claims 1-19 are rejected under 35 U.S.C. 102(e) as being anticipated by England et 
al. (hereinafter England), US 2002/0012432 Al. 

As per the following claims, England discloses: 

1 . A digital information security system comprising: a user application tool installed in a user 
terminal, the user application tool being structured to create a unique user key using unique 
system information of the user terminal; a data storage unit for storing user information and 
digital information; and a user management tool installed in a server, the user management tool 
being structured to receive the unique user key created by the user application tool, the user 
management tool being structured to store the received unique user key in the data storage unit, 
the user management tool being structured to compare the stored unique user key with a unique 
user key provided from the user application tool of a user currently being subjected to 
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Art Unit: 3621 
authentication fljlO-21). 



2. The digital information security system as claimed in claim 1, further comprising a history 
manager for managing user access and use history (f78, 107). 



3. The digital information security system as claimed in claim 1, wherein the unique system 
information includes at least one of unique CPU (Central Processing Unit) information, unique 
HDD (Hard Disk Drive) information, and serial number information of the user terminal fl|58, 
77, 137). 



4. The digital information security system as claimed in claim 1, further comprising a rule 
establishing unit for establishing a established rule according to a user rule previously 
established for the stored digital information, wherein the user application tool transmits 
information on the user rule during download of the digital information to the user, wherein upon 
downloading the digital information, the user application tool determines whether to output the 
downloaded digital information according to the established rule fl[290-292). 

5. The digital information security system as claimed in claim 4, wherein said digital information 
includes an encrypted user requested digital file and a digital file decoding key using said unique 
user key and said rule information (figures 9-1 1 and associated text). 

6. A digital information security method comprising: reading a first unique user key created 
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using unique system information of a user terminal when a sever is accessed by a user; 
comparing the first unique user key with a second unique user key included in previously stored 
user information for the user, to authenticate whether the user is an authorized user; encrypting a 
file uploaded by the authorized user using a preset encryption key, and storing the encrypted file 
as digital information; and encrypting a decoding key for the corresponding digital information 
using the second unique user key included in the user information, and downloading the 
encrypted decoding key along with the associated digital information in response to a digital 
information download request of the authorized user fl[274-290). 

7. The digital information security method as claimed in claim 6, further comprising the step of 
decoding the digital information by decoding the encrypted decoding key for the digital 
information downloaded from the user terminal using the first unique user key created from the 
unique system information (^185-187) 

8. The digital information security method as claimed in claim 6, wherein the downloading 
includes said encrypted digital file and said decoding key of said encrypted digital file and rule 
information on use authority fljl 12). 

9. The digital information security method as claimed in claim 6, further comprising: 
transmitting to the user a program for creating and transmitting the first unique user key using 
the unique system information of the user terminal when the user is unregistered, so as to allow 
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the user to install the program in the user terminal; and registering by the installed program the 
corresponding user using the first unique user key (1J173-183). 

10. A digital information security method comprising the steps of: creating a unique user key at a 
user terminal using unique system information of the user terminal; decoding an encrypted 
decoding key included in the digital information at the user terminal using the created unique 
user key; and decoding the digital information using the decoded decoding key, wherein the 
encrypted decoding key cannot be decoded when the key used for decoding the encrypted 
decoding key is not identical to the created unique user key (1(185-187). 

1 1. A digital information security system comprising: a key management service module 
installed in a user system, the key management service module being structured to encrypt user 
information including a unique user ID created based on system information of a corresponding 
user from a user application tool installed in a system of the user, and storing the encrypted user 
information; a document management service gateway structured to create a document key for 
the file when a file is uploaded from the user store the created document key, and encrypt a 
corresponding file using the created document key; a document distribution service module 
structured to create an encrypted download file including information on an output rule of the 
file in a predetermined user environment when downloading the file to the user; and a web server 
structured to transmit information on the file uploaded through the Internet by the user to the 
document management service gateway so that the document management service gateway 
encrypts the file, and transmit, upon receipt of a file download request from the user, information 
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on the request to the document distribution service module so that the document distribution 
service module creates an encrypted download file for the file (figures 5-9 and associated text). 

12. The digital information security system as claimed in claim 1 1, wherein the user application 
tool is structured to create the unique user ID and transmit the user information during initial 
installation and upgrade of the user system fl|173-183). 

13. The digital information security system as claimed in claim 11, wherein the user application 
tool includes a document viewer module structured to call a plurality of document edition 
software programs, output the called programs in a predetermined window, and allow the user to 
execute the document edition software programs (^272-292). 

14. The digital information security system as claimed in claim 13, wherein the document viewer 
module is structured to allow the user to execute the document edition software program on the 
window, and determine whether to perform a predetermined execution control operation 
including an operation of saving and printing a predetermined file according to predetermined 
rule information and user information for the file downloaded during execution of the document 
edition software program flJ48-66). 

15. The digital information security system as claimed in claim 11, wherein communication 
among the document key management service module, the document management service gate, 
the document distribution service module and the web server is performed through TCP/IP 
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(Transmission Control Protocol/Internet Protocol) (figure 12 and associated text). 

16. A digital information security method in a digital information security system including a 
documents key management service module for managing user information including a unique 
user ID created based on system information of a user, a document management service gateway 
for encrypting a corresponding file by creating a document key for an uploaded file, a document 
distribution service module for creating an encrypted download file including information on an 
output rule of a file to be downloaded, and a web server for performing a file 
uploading/download operation with the user through the Internet, transmitting information on an 
uploaded file to the document management service gateway and transmitting information on a 
download request to the document distribution service module, the method comprising the steps 
of: transmitting by the web server information on the uploaded file to the document management 
service gateway; reading by the document management service gateway the uploaded file by 
accessing a position where the file is actually uploaded from the server, using the information on 
the uploaded file; creating a document key for the read file in a predetermined decoding method, 
and storing the created document key along with the corresponding file information; encrypting 
the file using the created document key;, storing the encrypted file in a predetermined folder; and 
informing the web server that processing the uploaded file is completed (see above; ^[1 08- 120). 

17. The digital information security method as claimed in claim 16, further comprising the steps 
of: upon receipt of a file download request, transmitting by the web server information on a 
download-requested file to the document distribution service module; accessing by the document 



Application/Control Number: 10/034,485 Page 8 

Art Unit: 3621 

distribution service module a corresponding encrypted file using the information on the 
download-requested file; creating an encrypted download document file matched with an 
authority of the user based on user information of the user and information on the document key 
for the document and the output rule; storing the created encrypted download file in a download 
position; and informing the web server that processing the download-requested file is completed 
fl|l 14-158). 

18. The digital information security method as claimed in claim 16, wherein the information on 
the output rule includes a save authority which is a rule indicating whether the user can save the 
download document file in a user terminal of the user, a print authority which is a rule indicating 
possibility and number of printing the download document file, an available term authority 
indicating a rule for an available term of the download document file, and an assignment 
authority indicating a rule for assignment of the download document file fl|l 17, 142). 

19. The digital information security method as claimed in claimed 17, said creating an encrypted 
download document file includes combining said rule information on said authority with said 
decoding key of said encrypted file and encrypting said rule information and said decoding key 
using said unique user ID and combining combined said rule information and decoding key with 
said encrypted download document file fl|185-189). 

Examiner has pointed out particular references contained in the prior arts of record in the body 
of this action for the convenience of the applicant. Although the specified citations are 
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representative of the teachings in the art and are applied to the specific limitations within the 
individual claim, other passages and figures may apply as well It is respectfully requested from 
the applicant, in preparing the response, to consider fully the entire references as potentially 
teaching all or part of the claimed invention, as well as the context of the passage as taught by 
the prior arts or disclosed by the examiner. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure: 

• US Patent Number 5,892,900 to Ginter et al. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Bradley Bayat whose telephone number is 703-305-8548. The 
examiner can normally be reached on Tuesday-Friday during normal business hours. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James Trammell can be reached on 703-305-9768. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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